Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier:          qRpECZrsDJEgUEczlmnTY8/x9Jb36Q74kM/0pM1ABEk=
Subject key identifier:   47:71:CE:6C:6D:67:98:F8:69:DF:1B:8C:7E:7A:5F:9A:22:76:B8:F7
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer:       /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial:       01962ECFD9C0B0631BE7083BCB1FE14274E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number:          76
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: RBBOrZs8P+cCcLYx2znMx44lCZvhewl9DowxcaLBJEw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d9:c0:b0:63:1b:e7:08:3b:cb:1f:e1:42:74:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=4771ce6c6d6798f869df1b8c7e7a5f9a2276b8f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:42:67:74:77:61:f3:48:90:e2:8b:59:00:
                    8a:78:3d:d1:5f:28:d9:38:7d:09:9c:1b:81:15:e8:
                    76:6b:f4:12:c7:d7:5b:87:83:0d:86:87:2f:c7:53:
                    1e:b2:a3:c9:3b:e7:a8:b7:f3:4c:f3:85:75:c4:dd:
                    d8:73:4e:5e:f2:59:cb:86:42:ac:4c:1d:cb:dd:16:
                    35:59:f1:73:ee:c7:83:40:96:23:87:a9:7f:e1:c6:
                    c5:31:36:fd:f3:b4:d5:38:c1:99:91:fa:cd:99:eb:
                    a6:75:aa:00:51:b8:d7:73:f4:ab:64:20:a7:11:78:
                    62:39:1e:c0:71:e6:09:62:0c:75:a9:af:5e:6d:b8:
                    98:a4:aa:16:51:3c:63:a8:6a:f4:1e:0e:9d:99:f8:
                    a9:20:92:93:61:70:a9:cd:89:e9:0a:c5:c8:cc:75:
                    cc:4c:f4:99:98:72:a3:8c:58:3d:12:42:33:ff:27:
                    be:6e:b9:0f:e4:18:c7:e6:bd:35:e4:ef:71:e8:f2:
                    64:cf:e1:61:32:7d:86:1c:b8:42:0c:c9:f9:4f:d7:
                    fa:e1:fa:16:3b:de:0e:57:37:9d:b3:a0:42:e6:32:
                    1b:cc:eb:4d:ac:c8:7a:32:18:2d:3e:21:6e:7b:fa:
                    8e:38:07:8c:c6:cc:d6:8c:6b:e2:f5:39:e0:cc:d3:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:71:CE:6C:6D:67:98:F8:69:DF:1B:8C:7E:7A:5F:9A:22:76:B8:F7
            X509v3 Authority Key Identifier:
                keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:1e:9a:b4:2d:b0:bf:a5:e3:57:d7:f2:4d:f1:8f:bf:2e:
         4f:e8:4a:83:42:8e:0d:ef:95:f3:4c:1a:50:c5:da:0f:b4:39:
         b1:1c:b3:bb:08:c2:b5:c9:af:bf:06:61:b7:aa:b0:cb:02:1f:
         64:36:bb:b7:ed:87:36:aa:f7:26:09:e0:8c:f8:8a:22:1c:f9:
         40:c5:5d:0e:e7:4d:6b:76:06:49:2a:67:3b:2e:22:79:eb:ad:
         a6:4d:5a:4c:d8:ea:92:c5:3a:cb:98:bc:1e:4e:af:60:9d:3c:
         1a:de:4d:df:b0:77:68:c6:b4:8b:32:24:9b:d6:10:29:0c:0c:
         96:88:55:ad:54:f5:f7:99:4b:86:fe:79:d7:bb:99:a6:6b:d3:
         3e:46:f0:b5:23:15:7e:e7:9b:ea:06:1f:e5:dc:06:19:9d:f0:
         94:04:2d:6f:d1:84:41:bd:63:ef:4b:c1:9a:ca:b0:ed:c3:28:
         25:c5:a4:a0:b6:4c:73:0b:78:36:2a:24:ad:53:6c:c5:a5:d6:
         4a:6e:bf:54:0e:bc:e3:11:f6:37:e7:ae:d0:40:af:e8:2f:65:
         be:57:d8:61:07:b4:7a:de:f7:b6:4d:ed:bc:a7:b4:8d:86:cf:
         8f:30:c1:46:5d:cd:54:c3:0c:60:4d:0f:4d:19:a9:62:71:e1:
         dc:84:a4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----